Live › vulnerability › CVE-2019-4716
Go to dashboardIBM Planning Analytics has a flaw that lets an unauthenticated user overwrite its configuration and log in as the admin account. From there an attacker can run code as root or SYSTEM through TM1 scripting, and CISA lists it as actively exploited.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| IBM Planning Analytics | vendor | – | – |
Unknown from the sources. In the analyst’s queue.
Apply the IBM updates for Planning Analytics per vendor instructions; the specific fixed version is not stated in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2019-4716")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.